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IN THE CLAIMS 

1. (Currently Amended) A data processing system, comprising: 

a first processing resource in the form of a web server coupleable to a -an open 
communications network; and 

a second processing resource in the form of a back end server coupleable to 
said first processing resource; 

said first processing resource and said second processing resource being 
configured to establish a communications relationship between them through a non-network 
connected communications channel, whereby said second processing resource is restricted to 
implementing an instruction communicated from said first processing resource which only 
performs a predetermined allowable operation, thereby inhibiting compromise of said second 
processing resource. 

2-101. (Canceled) 

102. (Original) A data processing system as in claim 1, where said first processing resource is 
configured to transmit said instruction to said second processing resource for said instruction 
satisfying a predetermined criterion. 

103. (Original) A data processing system as in claim 1, where said first processing resource is 
configured to transmit said instruction to said second processing resource and where said 
second processing resource is configured to execute said instruction for said instruction 
satisfying a predetermined criterion. 
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104. (Currently Amended) A data processing system according to claim 4-103, said 
predetermined criterion comprising said instruction being included in a predefined set of 
allowable instructions for said second processing resource. 

105. (Currently Amended) A data processing system according to claim 4-102, said 
predetermined criterion comprising said instruction being identified as an allowable 
instruction for said second processing resource. 

106. (Currently Amended) A data processing system according to claim 4 -103, said second 
processing resource being configured to transmit an instruction fail message to said first 
processing resource responsive to said second processing resource determining said 
instruction failing to satisfy said predetermined criterion. 

107. (Original) A data processing system according to claim 1, said second processing 
resource comprising a database of executable instructions defining predetermined allowable 
functionality of said second processing resource. 

108. (Original) A data processing system according to claim 1, said instruction comprising a 
computer program procedure name. 

109. (Currently Amended) A data processing system according to claim 4 -102, said second 
processing resource configured to provide a reply message to said first processing resource 
responsive to an instruction satisfying said predetermined criterion. 
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1 10. (Original) A data processing system according to claim 1, said first processing resource 
comprising a storage medium configured to store said instruction in a queue prior to 
transmission to said second processing resource. 

111. (Currently Amended) A data processing system according to claim 1 , said instruction 
being comprised in a message for transmission to said second processing resource. 

112. (Original) A data processing system according to claim 111, said first processing 
resource comprising a storage medium configured to store said message in a queue prior to 
transmission to said second processing resource. 

113. (Currently Amended) A data processing system according to claim 111, wherein said 
message includes an instruction type and said fust processing resource configured to provid e 
ainclude in said message including an action code indicative of aa -the instruction type 
included in said m e ssag e. 

114. (Currently Amended) A data processing system according to claim 111, said first 
processing resource comprising a storage medium configured to store said message prior to 
transmission to said second processing resource, said message including an instruction type, 
said first processing resource being further configured to provid e a include in said message 
including an action code indicative of an-the instruction type includ e d in said m e ssag e, and 
said first processing resource configured to store said message in accordance with a priority 
assigned to said action code. 

115. (Original) A data processing system according to claim 111, said first processing 
resource comprising a storage medium configured to store said message prior to transmission 



4 



S.N. 09/930,612 
Art Unit: 2137 

to said second processing resource, said first processing resource configured to store 
messages in accordance with their chronological order. 

116. (Currently Amended) A data processing system according to claim 114, said first 
processing resource being configured to select a stored message for transmission to said 
second processing resource in accordance with a priority determined by said action code of 
said message. 

117. (Original) A data processing system according to claim 1, said first processing resource 
configured to transmit said instruction or a message including said instruction responsive to 
receiving a communication comprising sensitive information and to discard said sensitive 
information from said first processing resource. 

118. (Original) A data processing system according to claim 117, said message representing 
sensitive information derived from said communication. 

1 19. (Original) A data processing system according to claim 117, wherein said sensitive 
information is discarded in response to transmission of said message comprising sensitive 
information to said second processing resource. 

120-124. (Canceled) 

125. (Currently Amended) A data processing apparatus, comprising: 

a first processing resource in the form of a web server coupleable to aan open 
communications network and to a non-network connected communications channel; said first 
processing resource being configured to transmit an instruction to a second processing 



5 



S.N. 09/930,612 
Art Unit: 2137 



resource in the form of a back end server disposed in a non-open network coupled data 
processing apparatus responsive to receiving a communication via said n e twork 
communications channel and for said instruction satisfying a predetermined criterion. 

126. (Currently Amended) A data processing apparatus according to claim 125, further 
comprising a storage medium to store said instructions instruction in a queue prior to 
transmission to said second processing resource. 

127. (Original) A data processing apparatus according to claim 125, wherein said first 
processing resource is configured to form a message including said instruction for 
transmission to said second processing resource. 

128. (Currently Amended) A data processing apparatus according to claim 127, wherein said 
message includes an instruction type and w herein said first processing resource is configured 
to fera- ainclude in said message including an action code indicative of an instruction type 
included in said m e ssag e. 

129. (Original) A data processing apparatus according to claim 128, wherein said first 
processing resource is configured to store messages in accordance with a priority assigned to 
said action code. 

130. (Original) A data processing apparatus according to claim 127, wherein said first 
processing resource is configured to store messages in accordance with their chronological 
order. 
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131. (Currently Amended) A data processing apparatus according to claim 127, said first 
processing resource being configured to transmit said instruction or message responsive to 
receiving a communication comprising sensitive information and to remove at least that part 
of said communication comprising said sensitive information from said first processing 
resource. 

132. (Original) A data processing apparatus according claim 125, said instruction comprising 
a computer program procedure name. 

133. (Original) A data processing apparatus according to claim 132, said predetermined 
criterion comprising said instruction or said computer program procedure being included in a 
predefined set of allowable instructions or computer program procedures for said second 
processing resource. 

134. (Original) A data processing apparatus according to claim 132, said predetermined 
criterion comprising said instruction or said computer program procedure being identified as 
an allowable instruction or computer program procedure for said second processing resource. 

135. (Currently Amended) A data processing apparatus, comprising: 

a second processing resource in the form of a back end server t hat is 
configured to respond to an instruction received from another processing resource in the form 
of a web server disposed in another data processing apparatus to execute only instructions 
satisfying a predetermined criterion. 
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136. (Original) A data processing apparatus according to claim 135, further comprising a 
database of executable instructions defining predetermined allowable functionality of said 
data processing apparatus. 

137. (Original) A data processing apparatus according to claim 135, said instruction 
comprising a computer program procedure name. 

138. (Original) A data processing apparatus according to claim 137, said predetermined 
criterion comprising said instruction or said computer program procedure being included in a 
predefined set of allowable instructions or computer program procedures for said second 
processing resource. 

139. (Original) A data processing apparatus according to claim 137, said predetermined 
criterion comprising said instruction or computer program procedure being identified as an 
allowable instruction or computer program procedure for said second processing resource. 

140. (Currently Amended) A method for operating a processing system including a first 
processing resource in the form of a web server coupleable to an open communications 
network and a second processing resource in the form of a back end server, the method 
comprising: 

establishing a communications relationship between said first and second 
processing resource through a non-network connected communications channel w hereby said 
second processing resource is restricted to implementing an instruction communicated from 
said first processing resource which only performs a predetermined allowable operation, 
thereby inhibiting compromise of said second processing resource. 
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141. (Original) A method according to claim 140, said first processing resource transmitting 
said instruction to said second processing resource for said instruction satisfying a 
predetermined criterion. 

142. (Original) A method according to claim 140, said first processing resource transmitting 
said instruction to said second processing resource, and said second processing resource 
executing said instruction only if said instruction satisfies a predetermined criterion. 

143. (Currently Amended) A method according to claim 440142, said predetermined criterion 
comprising said instruction being included in a predetermined set of allowable instructions 
for said second processing resource. 

144. (Currently Amended) A method according to claim 440141, said predetermined criterion 
comprising said instruction being identified as an allowable instruction by said second 
processing resource. 

145. (Currently Amended) A method according to claim 440142, further comprising said 
second processing resource transmitting an instruction fail message to said first processing 
resource responsive to said second processing resource determining said instruction failing to 
satisfy said predetermined criterion. 

146. (Original) A method according to claim 140, said second processing resource 
comprising a database of executable instructions defining predetermined allowable 
functionality of said second processing resource. 
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147. (Original) A method according to claim 146, further comprising said second processing 
resource comparing said instruction with said database of executable instructions for 
determining whether said instruction is an allowable instruction. 

148. (Original) A method according to claim 140, said instruction comprising a computer 
program procedure name. 

149. (Currently Amended) A method according to claim 44 0141, further comprising said 
second processing resource providing a reply message to said first processing resource 
responsive to said second processing resource determining that an instruction satisfies said 
predetermined criterion. 

150. (Original) A method according to claim 140, further comprising said first processing 
resource storing said instruction in a queue prior to transmitting said instruction to said 
second processing resource. 

151. (Original) A method according to claim 140, said first processing resource forming a 
message comprising said instruction and transmitting said message to said second processing 
resource. 

152. (Original) A method according to claim 151, further comprising said first processing 
resource storing said message in a queue prior to transmitting said message to said processing 
resource. 
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153. (Original) A method according to claim 151, further comprising said first processing 
resource forming said message to include an action code indicative of an instruction type 
included in said message. 

154. (Original) A method according to claim 153, further comprising said first processing 
resource storing said message in accordance with a priority assigned to said action code. 

155. (Original) A method according to claim 151, further comprising said first processing 
resource storing said message in accordance with a chronological order. 

156. (Original) A method according to claim 153, further comprising said first processing 
resource transmitting a message to said second processing resource in accordance with a 
priority determined by said action code of said message. 

157. (Original) A method according to claim 151, further comprising said first processing 
resource transmitting said instruction or message in response to receiving a communication 
comprising sensitive information and discarding said sensitive information from said first 
processing resource. 

158. (Original) A method according to claim 151, further comprising said first processing 
resource deriving sensitive information from a communication, and including said sensitive 
information in said message. 
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159. (Original) A method according to claim 158, further comprising said first processing 
resource discarding said sensitive information in response to a transmission of said message 
comprising said sensitive information to said second processing resource. 

160. (Original) A method according to claim 158, further comprising said first processing 
resource discarding said sensitive information within a predetermined time period. 

161. (Currently Amended) A method according to claim 160, wherein said time period is one 
of the following: (1) less than 2 minutes from receipt of said communication, pr e f e rably ( 2) 
less than 1 minute from receipt of said communication and mor e pr e f e rabl y or (3) the shortest 
time possible from receipt of said communication. 

162-174. (Canceled) 

175. (Currently Amended) A computor pro gramc airier medium comprising computer 
machine readable instructions, translatable for configuring a data processing apparatus or 
system to include or establish a communications relationship through a non-network 
connected communication channel b etween a first processing resource in the form of a web 
server coupleable to an open communications network and a second processing resource in 
the form of a back end server w hereby said second processing resource is restricted to 
implementing an instruction communicated from said first processing resource which only 
performs a predetermined allowable operation, thereby inhibiting compromise of said second 
processing resource. 

176. (Currently Amended) A computor program carrier medium according to claim 175, 
further translatable for configuring said data processing apparatus or system to transmit said 
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instruction from said first processing resource to said second processing resource for said 
instruction satisfying a predetermined criterion. 

177. (Currently Amended) A comput e r program carrier medium according to claim 175, 
further translatable for configuring said data processing apparatus or system to transmit said 
instruction from said first processin g resource to said second processing resource, and said 
second processing resource executing said instruction only if said instruction satisfies a 
predetermined criterion. 

178. (Currently Amended) A comput e r progra m carrier medium according to claim 175, 
where said computer machin e r e adable instructions are e mbodied in a carrier m e dium, said 
carrier medium comprising comprises at least one of the following: 

a solid-state memory; 

a magnetic tape memory medium; 

a magnetic disc such as a floppy disc storag e m e dium ; and 
an optical storage m e dium; m edium. 

a communications carrier signal such as an RF carri e r signal or optical carri e r 

signal; and 

an electronic signal. 

179. (Cancelled) 



180. (Currently Amended) A comput e r program carrier medium comprising computer or 
machine readable instructions for configuring a data processing apparatus or system 
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comprising a first processing resource in the form of a web server coupleable to an open 
communications network and a second processing resource in the form of a back end server 
to establish a communications relationship between said first and second processing resources 
through a non-network connected communication channel ; and 

to transmit said-an instruction from said first processing resource to said 
processing resource for said instruction satisfying a predetermined criterion, whereby said 
second processing resource is restricted to implementing an instruction communicated from 
said first processing resource which only performs a predetermined allowable operation, 
thereby inhibiting compromise of said second processing resource. 

181. (Currently Amended) A computer program carrier medium as in claim 1 80, said second 
processing resource executing said instruction only if said instruction satisfies said 
predetermined criterion. 

1 82. (Currently Amended) A comput e r proflram carrier medium in accordance with claim 
180, said carrier medium comprising at least one of the following: 

a solid-state memory; 

a magnetic tape memory medium; 

a magnetic disc such as a floppy disc storago medium ; and 
an optical storage m e diumi m edium. 

a communications carrier signal such as an RF carrier signal or optical carri e r 

signal; and 

an electronic signal. 
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183. (New) A data processing system according to claim 1, wherein the system is configured 
to operate in a command mode for transmitting commands from the second processing 
resource to the first processing resource. 

184. (New) A data processing system according to claim 1 17, said first processing resource 
being configured to discard said sensitive information within a predetermined time period. 

185. (New) A data processing system according to claim 184, wherein said time period is 
one of the following: (1) less than two minutes from receipt of said communication or (2) the 
shortest possible time from receipt of said communication. 

186. (New) A method according to claim 140, further comprising operating the processing 
system in a command mode for transmitting commands from the second processing resource 
to the first processing resource. 
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